$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/158142d2-a6b7-34ca-be4a-89fc8257488f.roa File: 158142d2-a6b7-34ca-be4a-89fc8257488f.roa (raw, json) Hash identifier: Gn2ZqDTNNDQnNuMQyFB1q9f+X3BgmEDjbwIPik3XLJI= Subject key identifier: 59:D0:71:93:57:BE:7F:85:08:51:0C:0F:0A:7F:14:E2:50:75:B9:FC Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F432858497F099D0E3E5F6DE94BD88B00 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/158142d2-a6b7-34ca-be4a-89fc8257488f.roa Signing time: Sat 12 Apr 2025 01:00:48 +0000 ROA not before: Sat 12 Apr 2025 01:00:48 +0000 ROA not after: Fri 11 Jul 2025 01:00:48 +0000 asID: 7029 IP address blocks: 66.32.8.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:7f:09:9d:0e:3e:5f:6d:e9:4b:d8:8b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Apr 12 01:00:48 2025 GMT Not After : Jul 11 01:00:48 2025 GMT Subject: CN=2981032a-c40c-4253-a36f-01529d0c3f1b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:5c:1c:b6:02:11:39:96:57:68:de:80:bd:d7: 32:0a:7e:52:e9:63:e8:27:36:b9:d7:c4:a9:7f:f1: 25:38:d6:55:89:e8:4a:22:89:70:b8:37:44:9a:b0: c1:36:33:49:28:be:a9:21:14:c4:34:f8:21:1a:66: 73:65:02:b2:10:18:47:8a:d7:67:26:4c:46:57:12: 6e:e0:e3:ec:31:6f:c6:75:fb:37:24:00:89:f8:9d: f1:77:b4:05:e8:4a:13:96:87:a6:89:48:bd:37:59: 0c:df:47:6e:4e:4c:6e:0d:30:b4:39:16:b2:d2:1d: 0e:bf:fd:03:d6:79:b3:01:e9:63:07:16:ae:8f:b6: b9:6d:e9:9d:4b:7e:49:a2:7c:72:62:0a:ab:95:20: 20:33:1b:83:ec:3a:bc:11:89:7b:fc:56:1b:3e:c0: 8b:ea:a3:2d:42:a8:47:1e:a6:eb:5b:42:ba:0c:c7: ca:c2:39:ae:a6:ec:e8:41:da:72:9d:b4:00:c4:10: b4:13:c2:02:70:72:9d:31:28:00:32:ef:57:3a:66: ea:1a:09:6b:5b:91:1f:f4:d6:de:63:d6:dc:6a:4c: 6d:18:63:dc:95:e2:02:1c:f0:d6:56:81:c4:62:51: 3d:72:5d:32:64:d7:e6:f0:4c:fe:d0:0b:10:07:22: 20:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:D0:71:93:57:BE:7F:85:08:51:0C:0F:0A:7F:14:E2:50:75:B9:FC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/158142d2-a6b7-34ca-be4a-89fc8257488f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 66.32.8.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 97:9d:8d:90:9d:58:b0:b4:46:64:7f:e1:f5:21:d2:e6:00:a3: 36:6e:79:78:7a:38:11:57:c8:14:47:0f:59:de:cc:b3:e9:ff: 43:04:4e:6b:5a:d7:55:62:d5:4e:ea:80:61:a1:79:38:8c:0e: 8b:a9:d5:5d:b0:fa:7b:e2:a2:0d:73:ba:5e:5c:e0:38:fd:eb: cd:1b:c4:37:0d:02:76:11:16:54:96:d4:03:8a:29:80:7b:a4: 59:4e:8f:9d:59:a1:ee:8f:33:2b:6d:5f:aa:88:bc:06:48:66: 1a:fe:13:29:15:dd:dd:64:d5:9d:52:bc:11:64:a8:56:65:3b: 71:04:be:89:95:bc:94:19:3d:c6:14:4d:b1:da:73:5d:03:b5: 71:7d:7e:4f:4b:35:d7:75:77:ad:1c:2c:69:a8:9a:0d:4e:dc: 77:fc:b9:26:49:36:fc:f0:28:ee:d0:12:3e:e5:c2:be:dd:9b: 17:84:a5:44:93:60:ea:15:b1:03:c3:7d:bb:19:d7:c1:bc:59: 1a:93:d5:e9:ff:45:b2:2e:47:72:52:df:e2:cc:5f:ea:4e:8f: 76:17:8a:6c:e1:f8:83:5f:08:ab:3f:1c:dc:0b:b6:21:d2:00: b3:67:4b:0e:91:9e:9a:cf:85:dd:11:f9:a0:15:50:a3:91:c2: a4:53:2d:1b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEl/CZ0OPl9t6UvYiwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDQxMjAxMDA0OFoXDTI1MDcxMTAxMDA0OFowLzEtMCsGA1UEAxMk Mjk4MTAzMmEtYzQwYy00MjUzLWEzNmYtMDE1MjlkMGMzZjFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArlwctgIROZZXaN6AvdcyCn5S6WPoJza518Sp f/ElONZViehKIolwuDdEmrDBNjNJKL6pIRTENPghGmZzZQKyEBhHitdnJkxGVxJu 4OPsMW/Gdfs3JACJ+J3xd7QF6EoTloemiUi9N1kM30duTkxuDTC0ORay0h0Ov/0D 1nmzAeljBxauj7a5bemdS35JonxyYgqrlSAgMxuD7Dq8EYl7/FYbPsCL6qMtQqhH HqbrW0K6DMfKwjmupuzoQdpynbQAxBC0E8ICcHKdMSgAMu9XOmbqGglrW5Ef9Nbe Y9bcakxtGGPcleICHPDWVoHEYlE9cl0yZNfm8Ez+0AsQByIgvQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFnQcZNXvn+FCFEMDwp/FOJQdbn8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMTU4MTQyZDItYTZiNy0z NGNhLWJlNGEtODlmYzgyNTc0ODhmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDQiAIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJedjZCdWLC0RmR/4fUh0uYAozZueXh6OBFXyBRHD1nezLPp/0METmta 11Vi1U7qgGGheTiMDoup1V2w+nviog1zul5c4Dj9680bxDcNAnYRFlSW1AOKKYB7 pFlOj51Zoe6PMyttX6qIvAZIZhr+EykV3d1k1Z1SvBFkqFZlO3EEvomVvJQZPcYU TbHac10DtXF9fk9LNdd1d60cLGmomg1O3Hf8uSZJNvzwKO7QEj7lwr7dmxeEpUST YOoVsQPDfbsZ18G8WRqT1en/RbIuR3JS3+LMX+pOj3YXimzh+INfCKs/HNwLtiHS ALNnSw6RnprPhd0R+aAVUKORwqRTLRs= -----END CERTIFICATE-----Generated at Mon Apr 28 21:05:57 2025 by rpki-client